When a family member dies holding Bitcoin or other digital assets, the estate faces a problem most attorneys have never encountered — and most crypto professionals have never handled within the context of a probate proceeding.
The assets are real. They can be worth a great deal. But they exist in a form that doesn't appear on a bank statement, can't be transferred with a letter of authorization, and in some cases — as this estate revealed — may have already been accessed by someone who had no right to be anywhere near them.
What follows is an account of one engagement I worked over the course of more than two years. I'm sharing it because attorneys and families navigating these situations deserve to understand what this process actually requires.
Part One: The Liquidation
The call came through a referral — an estate administrator whose family member had passed away holding a significant amount of Bitcoin. She needed the assets liquidated and the estate settled properly. The work was clearly defined. The path forward seemed straightforward.
I traveled to her home to assess the situation firsthand. That initial visit matters more than people realize. You cannot properly evaluate a digital asset situation remotely. You need to see the hardware, the documentation, whatever the decedent left behind. The picture changes when you're in the room.
What I found was workable. Private keys were accessible, documentation supported the process, and the path to liquidation was clear. I helped the administrator open accounts on two exchanges in her name and managed the full process — documenting every step as we went.
The estate held over 67 Bitcoin. The liquidation was clean, fully documented, and handled with clear communication throughout. Three months later, the estate attorneys needed records during probate. Everything was organized on an encrypted drive and retrievable within hours.
As far as I was concerned, the matter was closed.
Part Two: The Coins in the Safe Deposit Box
Fifteen months later, the administrator called again. While going through her son's belongings, she had found physical coins stored in a safe deposit box — and she wanted to know if they were worth anything.
I managed her expectations from the start. Physical crypto coins are almost always Casascius coins, and the funded ones are increasingly rare. Many were redeemed years ago. There was a real chance these would turn out to be spent.
A Casascius coin is a physical Bitcoin collectible produced between 2011 and 2013 by a man named Mike Caldwell. Each coin contained a real private key sealed beneath a tamper-evident hologram — meaning the coin itself held live Bitcoin, accessible only by breaking the seal.
- Hologram intact — Bitcoin likely still present
- Hologram peeled — coin is spent, Bitcoin was redeemed
- Collector value exists regardless, but funded coins are worth considerably more
I traveled back to examine the coins in person.
They were genuine Casascius coins — the kind of thing you don't come across often. But the holograms had been peeled. The private keys had been redeemed back in the summer of 2017, years before her son's passing. The Bitcoin was long gone.
Disappointing news. But while I was there, I asked whether there was anything else of her son's I should look through. Computers. Phones. USB devices. Anything he might have used to store digital assets.
She had more.
Part Three: The Trezor
Among her son's belongings was a Trezor — a hardware wallet, one of the most widely used devices for storing Bitcoin offline. For families who don't know what they're looking at, a Trezor resembles a small USB device. It's easy to overlook. Easy to discard without ever understanding what was on it.
After careful investigative work to access the device and retrieve the private keys it held, I was in.
What I found stopped me cold.
There were 11 transactions on this wallet — occurring across a window that spanned from 4 days to 14 months after her son's passing. Someone had been accessing this wallet after he died.
I paused. I thought carefully about how to handle what I had just uncovered. This woman had already been through an enormous amount — the loss of her son, a lengthy probate process, and now this. The way I delivered this information mattered as much as the information itself.
I told her directly and clearly what the blockchain showed. I documented everything. Then I contacted the legal team.
Part Four: The Investigation
What had started as a straightforward asset liquidation became my first full digital forensics investigation into stolen estate assets. The engagement that was supposed to be finished ran for another 15 months.
The blockchain doesn't lie. Every transaction is timestamped, traceable, and permanent. The record of what happened to those funds — and when — was immutable. My job was to build the human narrative around it: who had access, what they knew, and what the movement of those funds revealed.
The Challenges
The hardest part wasn't the on-chain analysis. It was the human side of the work. Getting an accurate account of events from everyone involved after a death is complicated. People remember things differently. Some details get filtered through grief. Others get filtered through something else.
Being empathetic, organized, meticulous, and thorough in this kind of work aren't professional qualities — they're requirements. I had to reconstruct a timeline, cross-reference statements against transaction data, identify inconsistencies, and build a record the legal team could actually use in proceedings.
The Interrogation
With the evidence documented and presented, the legal team asked me to do something I had never done before: sit across from the suspect and ask questions directly.
The individual was cooperating — voluntarily, they said, because they had nothing to hide. I asked questions built specifically around the blockchain evidence. Transaction by transaction. Date by date.
This is why the blockchain is such a powerful forensic instrument. The ledger is public, permanent, and precise. Every movement of funds leaves a record that cannot be altered, deleted, or negotiated away. You cannot explain what it recorded. You can only account for it.
The evidence spoke for itself. The legal team had what they needed to move forward.
The suspect arrived claiming to have nothing to hide. By the end, the blockchain evidence was so clear and irrefutable that they went from full denial to a complete reversal — returning 100% of the assets identified in the investigation.
Case Timeline
What This Case Teaches Us
For Attorneys
- Digital assets can be accessed by unauthorized parties after death — and the blockchain timestamps every transaction permanently.
- Hardware wallets, private keys, and seed phrases must be identified and secured as soon as an estate is opened, before others have access to the property.
- Blockchain transaction records are traceable, permanent, and can support estate litigation and theft claims in court.
- Bring in a qualified digital asset specialist early — not after the situation has already become complicated.
For Families and Executors
- If your loved one held Bitcoin or digital assets, treat any related hardware and documents the way you would treat cash. Secure it immediately.
- Physical coins, hardware wallets, USB devices, and handwritten notes can all represent real, substantial value.
- If you're not sure what you're looking at — don't touch it, don't move it. Contact someone qualified to assess it.
- Unauthorized access to estate digital assets is theft. The blockchain makes it very difficult to deny.
